Check: GEN001460
VMware ESX 3 Server:
GEN001460
(in version v1 r2)
Title
All interactive user home directories defined in the /etc/passwd file must exist. (Cat III impact)
Discussion
If a user has a home directory defined that does not exist, the user may be given the / directory, by default, as the current working directory upon logon. This could create a denial of service because the user would not be able to perform useful tasks in this location.
Check Content
Check all user accounts home directory assignments. If any user account does not have a home directory, this is a finding.
Fix Text
If a user has no home directory, determine why. If possible, delete accounts with no home directory. If the account is valid, then create the home directory using the appropriate system administration utility or manually create, i.e., mkdir <directory name>; copy the skeleton files into the directory; chown <user name> <directory name> for the new directory and the skeleton files. Document all changes.
Additional Identifiers
Rule ID: SV-900r2_rule
Vulnerability ID: V-900
Group Title: GEN001460
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
Controls
| Number | Title |
|---|---|
| AC-6 |
Least Privilege |